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INTRODUCTION 


This book provides for the student of cryptanalysis an 
enciphered code problem where an “additive" method of 
encipherment has been used. The use of an "additive" to 
(Super)encipher a digital code for a long time has been 
a traditional and conventional method of providing added- 


security to a basic code system. 


Most countries at one time or another during their 
history have used some form of "additive" system for the 
(Super)encipherment of diplomatic and military code systems. 
Indeed, it is probable that even today somewhere in this 


world there is an "additive" system being used. 


Not only will the student find great enjoyment in 
solving the problem which forms the central feature of this 
book, but he also will probably gain much knowledge concerning 
an aspect of cryptography which generally has received little 
PUBLIGITCY.. 

In the problem encountered in this book the student will 
be introduced to what might be termed practical cryptanalysis; 
that is, the student will meet a type of cryptographic 


system that in the recent past has been widely used. 


In order to read the plaintexts of the provided messages, 
the student has a twofold task: he must first solve the 


(super) encipherment system(s) used, then solve the basic 


code. 


At this point comments are perhaps in order concerning 
terminology. By "additive" we mean a numerical key which 
in the encipherment process is "added" to basic code groups. 
The addition is done without carrying. Thus, for example, if 
the "additive" is 8633 and the basic code group is 7268, the 
enciphered code group becomes 5891, not 15901. Likewise, in 
the decipherment process, the "additive" is subtracted 
(without carrying) from the enciphered code group to obtain 
the original basic code group, i.e., 5891 - 8633 = 7268. 


Two terms, too, are used with some frequency in this text: 


V 


placode and encicode. Both words were coined by the late 
William F. Friedman; and both are used frequently when 
describing code systems and enciphered code systems. 
Placode, a portmanteau word composed by joining the words 
"plain" and "code", means "plain code" or unenciphered 
code; whereas, encicode, another portmanteau word composed 
by joining the words "enciphered" and "code", means 
“enciphered code". In the solution of an enciphered code 
system, the cryptanalyst's efforts therefore are directed 
first at reducing encicode to placode. Thereafter, the 
solution of the placode should be easy, provided only that 


sufficient text be available. 


Much thought went into deciding the manner in which 
to present the problem which forms the central feature of 
this book. Finally, the idea of providing a "miniature" 
or small-scale problem was hit upon. Thus, the "miniature" 
problem, which forms Chapter I, provides a guide for the 
student when he tackles the main problem in Chapters II 
and Iii. If the student will carefully follow the analysis 
of the "miniature" problem, difficulties with the main 
problem should be minimized — and, hopefully, the solution 
to the main problem will be assured. At any point during 
the solution of the main problem, if the student should 
reach an impasse, a careful referral or examination of the 
solution to the "miniature" problem should resolve the 


difficulty. 


Finally, when solutions to all messages are reached, 
it is certain that the student will sit back, reflect on 
all that he has learned, and he may take well-deserved 


pride in his accomplishment! 


Mission Viejo, California WGB 
August 1979 
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CHAPTER I 


A "MINIATURE" PROBLEM FOR THE STUDENT 


The problem in this chapter is a realistic "small scale" 
version of the principal or "big" problem to come in the next 
two chapters. The problem in this chapter is presented 
essentially as a “learning aid" for the student. Thus, by 
learning how this "miniature" problem is solved, the student 


will be in a good position to solve the "big" problem to come. 


Therefore, the student should carefully follow the 
cryptanalytic method used in attacking the problem in this 
chapter before he attempts to solve the "problem" in the 


following chapters. 


In this "miniature" problem the enemy is using a simple 
two-digit code system where the code groups have been then 
(super)enciphered using an "additive". Each message contains 
a two-digit “message indicator" which informs the receiving 
code clerk where to commence using the "additive" in order to 


read the message. 


Eleven messages, one which is in plaintext, have been 


intercepted, as follows: 


Message No. l 

(intercepted at 0530 hours) 

ABC de GGG 

Group count 44. 

OG 92 53 43 78 Of 2&7 24 55 45 90 92 15 12 7B 32 76 39 10 13 
78 51 65 20 82 52 48 00 59 54 49 53 49 45 16 17 88 61 95 4] 
S32 34 12 82 


Message No. 2 

(intercepted at 0650 hours) 

GGG de ABC 

Group count 47. 

27 60 12 39 O1 44 94 70 70 41 82 37 05 99 30 11 76 53 45 ll 
80 80 36 84 95 41 43 66 56 48 61 43 94 28 82 59 03 12 90 62 
id 66 OS OS GS 39 i 


Message No. 3 
(intercepted at 0655 
XYZ de STS 

Group count 42. 

UO" ha “bao 28-30 "30 
Cr OU), ee eG eae” ey” Ea 
iP Reiss 


Message No. 4 
(intercepted at 0700 
ABC de GGG 

Group count 34. 

06 64 65 84 37 82 30 
49 90 93 78 55 44 66 


Message No. 5 
(intercepted at 0725 
XYZ de STS 

'GEoup count "36. 

a” Ye0 2 39, 38 45 Sl 
43 45 73 76 95 50 99 


Message No. 6 
(intercepted at 0805 
ABC de GGG 

Group count 36. 

2 Io ee aie Te, oe 
29 17 60.0 81.90 128 


Message No. 7 
(intercepted at 0910 
ofS de XYZ 

Group count 41l. 

U6 64 65.72 4d 36 G65 
99 90 08 86 38 79 24 
29 


hours) 


95 75 51 83 31 84 50 43 12 11 40 74 ll 
76 39 59 05 57 57 96 57 82 18 85 00 21 


hours) 


95 77 59 
a 39 03 


hours) 


26 15 43 
oi oe ed 


hours) 


64 43 09 
32 43 13 


hours) 


93 79 39 
26.39 75 


85 
39 


82 
iby i 


84 
50 


85 
21 


23 
14 


35 
43 


aD 
34 


Z3 
03 


aol 
51 


13 
08 


61 
B3 


81 
26 


06 43 94 46 36 40 38 
17 


92 
90 


48 
36 


2/ 
24 


76 53 64 87 


40 
59 


10 
63 


5 
41 


17 69 43 74 


Lit 25 a. 2a 
L3 42 86. 55 


46 
a 


43 
78 


58 
82 


Message No. 8 
(intercepted at 1030 
XYZ de STS 


GYOuUp Count 23, 


hours) 


85 22 62 44 29 82 66 69 06 59 39 50 53 99 79 64 74 15 80 95 


90 23 66 95 84 75 43 


Message No. 9 
(intercepted at 1045 
XYZ de STS 


Group count 9Y. 


08 00 28 16 03 33 


hours) 


TO ALBERT STOP CASUALTIES HEAVY WE ARE BEING 


Message No. 10 
(intercepted at 1110 
GGG de ABC 

Group count 35. 

oa OO 41 27781 53. 36 
Ss 5? B22 bo 03:12 GH 


Message No. ll 
(intercepted at 1200 
ABC de GGG 

Group count 42. 

a2 22 62 65 35 82 LS 
68 07 20 31 48 42 43 
39 84 


hours) 


73, 79 43 O01 76 95 68 59 
62 11 66 98 95 65 39 88 


hours) 


69 08 69 75 02 53 64 45 
28 @2.5L 03 57 325 $6 72 


OVERRUN. 


85 03 78 47 43 


94 21 57 06 95 
ai €i 96 52 12 


The following information has been obtained from traffic 


analysis: 


(1) Call-signs have been identified as: 


ABC = IX Corps (Headquarters). 


GGG = 98th Division (Headquarters). 


XYZ = Ist Ranger Battalion (Headquarters). 


STS = "C" Company, subordinate unit of the 
lst Ranger Battalion. 


(2) Identification of key personnel in the above units: 


1. Major General Ruff G. Jones is the Commanding 
General of IX Corps. 


2. Brigadier General Samuel F. Smith commands the 
98th Division. 


3. Colonel Jasper K. Albert commands the lst Ranger 
Battalion. : 


4. Commanding Officer of "C" Company, unit of the 
lst Ranger Battalion, is an officer whose last 
name is Grant. 

Cryptanalytic attack against an enciphered code system 
such as the present normally consists in preparing a 
"Message print" and a "message index" of the intercepted 


Cie Ce 


In the "message print" the intercepted messages are 
individually numbered (for reference purposes) and are 
printed in a uniform manner with the lines designated in 
some manner, such as the first line of the message — 
perhaps with ten groups to each line — being line A, the 
second line, B, etc. Thus, any particular code group in 
the traffic will be identified as being within a particular 


message and therein within a particular line. 


The "message index" is an index of all code groups that 
occur in the traffic. The code groups in the index are 
normally listed in numerical (or alphabetic) order. At the 
same time, each code group listed in the index will show: 


(1) The message number and line within that message from 
which the code group came. 


(2) A certain number of the code groups preceding the 
code group and a certain number of the code groups 
that follow the code group. 

A typical "message print" is shown in APPENDIX "A" and 
the "message index" corresponding to this "Message print" 
is shown in APPENDIX "B". The student should carefully 
examine the "message index" in APPENDIX "B" and note how 
each line of the index concerns a particular code group 


found within the "message print". 
For example, in the "message index" (APPENDIX "B") we 


s he 





might examine the code group 08884 which occurs 


"message index" as follows: 


in the 


05 E 20413 54299 46827 27509 08884 34096 68086 35763 51971 
08 E 20323 28133 46827 27509 08884 34096 88868 66886 95886 
14 C 20387 68171 69152 31762 08884 86724 06233 88907 72116 
15 B 20323 23570 81265 59019 08884 34951 35339 11080 39132 
17 D 35357 34441 09782 34989 08884 52103 39614 39270 08245 
20 C 20323 21245 29739 47022 08884 82071 31613 79059 43139 
22 E 20404 09860 31893 89332 08884 02142 95240 51771 46489 
23 C 07169 90806 19054 58938 08884 06809 80402 50763 38802 
25 E 00594 56608 19636 41108 08884 34906 80402 04960 51971 

It is seen that the group 08884 occurs nine times in the 


traffic listed or printed in the "message 


locations of these occurrences are shown. 


pee. 


The 


Thus, for example, 


the first occurrence of the group 08884 occurs in Message 


No. 


5 on line E, 


etc. 


preceding groups and four following groups are shown. 


In this particular index, the four 


LE 


ls seen, too, that in this particular index, though the 


"lines" are listed primarily by code group, secondarily 


(within code group) the lines are listed by message number. 


One of the principal purposes of the "message index" is 


to find repetitions between messages. 


THiS » 


in the case of 


the listing of the code group 08884, above, it is seen that 


there 
No. 5 


O05 E 
O08 E 


is a "hit" of four successive groups between messages 
and No. 8: 


20413 54299 46827 27509 08884 34096 68086 35763 51971 
20323 28133 46827 27509 08884 34096 88868 66886 95886 


Since this is a fairly long repetition which likely could 


not have occurred by accident, it is probable that with the 


messages juxtaposed at this point, the two messages have 


been enciphered with the same "additive"! 


But at this point let us return to our "miniature" 


problem — 


With the object of finding repetitions between messages, 


Lit 


the present "miniature" problem a "message index" might 


be 
Zo 


aie 


made. Since this is only a small-scale problem, intended 
show the student the method to attack the principal problem 


the following chapters, a "message index" for the present 


an (Ge 


problem, however, will not be made. Instead, the "beginning 


groups" of the intercepted messages will be examined: 


Message No. 1 


Message No. 2 — 27 60 12 39 01 44 94 70 70 
Message No. 3 — 06 64 65 43 21 30 30 95 75 . 
Message No. 4 — 06 64 65 84 37 82 30 95 77 
Message No. 5 — 27 60 12 39 38 43 51 2615. 
Message No. 6 — 45 59 11 70 53 56 54 64 43. 
Message No. 7 — 06 64 65 72 41 36 65 95 79 . 
Message No. 8 — 85 22 62 44 29 82 66 69 06 , 
Message No. 9 — (plaintext message) 

Message No. 10 — 74 00 41 27 81 53 36 73 79... 
Message No. ll — 85 22 62 85 35 82 18 69 08 ‘ 


Usually it is good cryptanalytic practice to "line up" 
Or arrange messages from their "beginnings", as above, when 
examining an unknown cryptographic system. The cryptanalyst 
at this point is somewhat "in the dark" in that he really is 
not sure what he is looking for, other than he would like to 
find anything unusual, anything that probably has not 
occurred by chance. In the case of an enciphered code 
system, the cryptanalyst would especially like to identify 
which group or groups in the messages are acting as discrim- 
inators or indicators. Is there a pattern, for example, in 
groups that occupy certain positions in the messages? If a 
pattern is found in groups in certain positions, it would 
probably indicate that these groups are "indicator groups". 
As is often the case, however, if the "indicator groups” 


are enciphered, their detection will be more difficult. 


In the "beginnings" shown above, there does not appear to 
be any particular pattern in groups in any particular 


position. But three messages have the same beginning: 


Message No. 3 — 06 64 65 43 21 30 30 95 75 
Message No. 4 — 06 64 65 84 37 82 30 95 77... 
Message No. 7 — 06 64 65 72 41 36 6595 79... 


Moreover, even in the few beginning groups there can 
be seen other "hits" between the messages: 
Message No. 3 — 06 64 65 43 21 30 30 95 75. 


Message No. 4 — 06 64 65 84 37 82 30 95 77... 
Message No. 7 — 06 64 65 72 41 36 65 95 79... 








At this point we might superimpose the three messages and 


look for other "hits" between the messages: 














Message No. 3 — 06 64 65 43 21 30 30 95 75 51 83 31 84 50 43 
Message No. 4 — 06 64 65 84 37 82 30 95 77 59 85 23 81 06 43 
Message No. 7 — 06 64 65 72 41 36 65 95 79 59 85 23 81 46 432 
12 11 40 74 11 81 28 86 42 13 41 76 39 59 
94 46 36 40 38 49 93 78 55 44 66 55 39 03 
58 11 25 31 29 99 08 86 38 79 24 28 39 75 


= lela 
10.2) C/O] © 


85 00 21 Li 85. 
Zu -O03 26 57 JS 62 13 42 56 S5 29, 


With the large number of "hits" between these three messages 
it is evident that all have been enciphered with the same 
"additive". } 


We are now in a position to examine those enciphered code 


groups (encicode) that have been enciphered with the same 


Nadditive". If there is a characteristic in the unenciphered 
code groups (placode), the characteristic may often be found 
by examining those enciphered groups that have been enciphered 


with the same "additive". This is a very important point and 


the student should thoroughly understand it. 


A characteristic in the unenciphered code groups (placode) 
may take a number of forms: certain positions in the placode 
may be odd or even; digits in certain positions may "sum" to 
certain values; in a four-digit code, for example, the first 
three digits may "sum" to the value of the fourth; or there 
may be certain limitations in the code groups, such as the 
code groups are of five digits, running from 00000 to 25000, 


etc. 


By examination of enciphered code groups that have been 
enciphered with the same "additive" the characteristics of 


the placode may often be found. 


As but one example, consider a code where the placode 





1. We are assuming here that we know the general type of 
system that the enemy is using, i.e., a code enciphered 
with an "additive". 


groups "sum to zero". That is, a placode group such as 8967 
might well be a valid group, as 8 + 9 + 6 + 7 = 0, whereas 
6639 could not be a valid placode group, since 6 + 6 + 3 + 9 
does not equal zero. 


Consider valid placode groups with this characteristic 
being enciphered with the same "additive": 
placode 8967 6068 0703 7779 SEAl 
+2365 +2365 +2365 +2365 +2365 
encicode 0222 S323 2068 9034 7685 
If we examine the enciphered code groups (the encicode 
groups), all of which have been enciphered with the same 
"additive" (in this case 2365), it will be seen that they 
all "sum to six", which is the sum of the digits in the 
"additive". Further, it may be noted that if two encicode 
groups which have been enciphered with the same additive are 
subtracted from one another, the effect of the "additive" 
is eliminated, and the result will have the same character- 
istic of the placode. Thus, if 0222 be subtracted from 
8323, the result will be 8101, which has the same character- 


istic as the placode, i.e., its digits "sum to zero". 


Though characteristics of the placode may often be found 
by examining enciphered code groups known to be enciphered 
with the same "additive", if the placode itself is random, 


there will of course be no characteristics to find. 


In the case of the three superimposed messages there 
appears to be no characteristic evident in those groups 
that are (presumably) enciphered with the same "additive". 


This, of course, is somewhat of a disappointment, but... 


We suddently notice something else! The locations of 
the "hits" between messages are noted. In each of the 
three messages every seventh group is the same! That LS 
each message begins with 06; seven groups later occurs 95, 
seven groups later, 43, then 90, then 39, and 82! This 


is hardly by accident. But what does it mean? 


We quickly turn to other messages and search for the 
groups 06, 95, 43, 90, 39, and 82, each with six interven- 


ing groups. -~ 8 - 


In Message No. 1 we find a portion of the same series: 


08 92 53 43 78 57 17 24 55 45 BO Fa 15 12 7S 322 76 Bo he a3 
78 Sl 65 20 82 52 48 00 59 54 49 53 49 45 16 17 88 61 95 41 
oa om LZ 92 


It appears that the series continues, following the 82, 
53 and 95. 


Message No. 2 confirms the series: 


27 60 12 39 01 44 94 70 70 41 82 37 05 99 30 11 76 53 45 11 
80 80 36 84 95 41 43 66 56 48 61 43 94 28 82 59 03 12 90 62 
11 66 98 95 65 39 88 


The complete series appears to be cyclical: 39, 82, 53, 
95, 43, and 90 — six numbers in length. 


It thus appears that these (presumably) null groups in 
some fashion serve as a check to the decoding code clerk 


that the "additive" (of the system) is being used correctly. 


From a cryptanalytic viewpoint, however, the null groups 
serve as an easy, convenient way to place messages in 
depth, i.e., to correctly superimpose messages so that 
all groups using a given group of "additive" will be beneath 


each other. 


It would appear then that the enemy 1S uSing one page of 
"additive" for all messages. The page of "additive" is 
probably in the form of a square, in this case 6 x 6, such 


as the following: 





At this point, of course, we do not know the particular 
thirty-six "additives" that fill the "additive" or 
enciphering square; nor can we be sure, though we do know 
their relative order, whether the "check groups” are 


placed correctly in relation to the square coordinates. 


By means of the now known "check groups" we may now 
place all messages "in depth" as follows: 


(90) (39) (82) (53) 


eee 


1990 93 15 12 75 32 76 39 10 13 78 51 65 20 82 52 48 00 59 54 49 53! 

#2(27 60 12 39 01 44 94 70 70 41 82 37 05 99 30 11 76 532 
“90 62 11 66 98 95 65 39 88)2 #3 (062 
°90 28 86 42 13 41 76 39 59 05 57 57 96 57 82 18 85 00 21 11 85)3 
*90 93 78 55 44 66 55 39 03 39 14 51 17)4 #4 (064 

#5(27 60 12 39 38 43 51 26 15 43 82 35 13 92 48 27 76 535 
690 28 32 43 13 50 34 39 59 63 41)§ #6(45 59 11 70 536 
1199 72 21 41 96 52 12 39 84)!} #7 (067 
790 08 86 38 79 24 28 39 75 21 03 26 57 78 82 13 42 56 55 29)7 


#8(85 22 62 44 29 82 66 69 06 59 39 50 538 


1099 62 11 66 98 95 65 39 8g)!9 #10(74 00 41 27 81 5310 


#11(85 22 62 85 35 82 18 69 08 69 75 02 5311 


(95) (43) 


149 45 16 17 88 61 95 41 32 31 12 92)! 

#1(08 92 53 43 78 57 17 24 55. 45! 

745 11 80 80 36 84 95 41 43 66 56 48 61 43 94 28 @9 

364 65 43 21 30 30 95 75 51 83 31 84 50 43 12 11 40 

464 65 84 37 82 30 95 77 59 85 23 81 06 43 94 46 36 

564 87 43 45 73 76 95 50 99 31 39 81 17 43 08 90 36 

656 54 64 43 09 84 95 61 40 10 12 17 69 43 74 29 17 

764 65 72 41 36 65 95 79 59 85 23 81 46 43 58 11 925 

899 79 64 74 15 80 95 50 23 66 95 84 75 43 08 00 28 

1036 73 79 43 O01 76 95 68 59 85 03 78 47 43 83 57 g 
1154 45 94 21 57 06 95 68 07 20 31 48 42 43 58 a2 5) 


Since the "check groups" are in effect "nulls" and provide 
no textual content to the messages, for convenience in 
analyzing the messages now "in depth", we may eliminate the 


“Check groups" entirely from the worksheets, so that we 


have the following: 


ii 2 13 ka oe ioe 21 22 23 2425 26 BL 22 3S 34 2b 3O: 44 42 423 42 





193 15 12 75 
#2 (27 
66 98 
42 13 
55 44 
#5 (27 
a5. 13 
41 96 
38 79 


BZ 
60 
ae 
4l 
66 
60 
50 
BZ 
24 


76 
12 
65 
76 
De 
12 


Ol 44 
88) @ 

59 05 
03 39 
38 43 
59 63 
g4) 11 
75 21 
#8 (85 
65 88)! 
#11(85 


262 
328 
49 3 


4: 
86 
78 
628 32 
au 
708 86 


34 


1175 12 


28 


1062 11 66 98 95 


94 70 


57 57 
14 51 
51 26 
41) 


O03 26 
wa Ox 


ae, “Ce 


70 41 37 05 99 
96 57 
17)4 

15 43 


18 85 00 


Bo jg 2 
#6 (45 


57 78 13 42 56 
44 29 66 69 06 

#10(74 OO 
So Sr 18 69 Os 


45 46 DE 52 53 54 55 356 61 62 62 64.65 66 
etanercept Ee pp 


92)1 

53 
61 
50 
06 
17 
69 
46 
75 
47 
42 


1gg 61 41 32 31 12 
#1 (08 
66 56 
83 31 
85 23 
31 39 
10 12 
85 23 
66 95 
85 03 
20 31 


2 
48 
84 
81 
81 
Lf 
B81 
84 
78 
48 


43 
oe) 
a) 
99 
40 
ae, 
as 
59 
O07 


236 
330 


84 
30 
30 
76 
84 
65 
80 
76 
O06 


78 
94 
1 
94 
08 
74 
58 
08 
83 
58 


Saf 
28 
id. 
46 
90 
29 
slat 
00 
57 
42 


451 
122 
813 
494 


24 55 
59 03 
74 11 
40 38 
24)° 
60 10 
31 29 
16 03 
59 03 
03 57 


B1® 
997 
33)8 
1210 
3511 


30 


21 


48 
59 


a2 
Bp, 
41 
oo 


LL 76 
#3 (06 


45 
64 


11 85)3 


#4 (06 
27 76 
11 70 
#7 (06 
29) 7 

39 50 
27 81 
75 02 


64 
64 
56 
64 


re 
36 
64 


10 13 78 51 65 20 52 48 00 59 54 49 49 45 16 17} 


11 80 802 


65 


65 
87 
54 
65 


19 
ie 
45 


43 


21° 


37" 
45° 
43° 
41’ 


It may be noted, also, that we have now numbered the 


columns, with the system of numbering following the 


we VT 


general coordinate pattern of the "additive" or encipher- 


ing square shown earlier on page 9. 


We may assume though that each message begins at some 
point within the "additive" square, and that the "beginning 
point" of the "additive" used for a message is indicated 
in some manner by a group (or groups) termed a "message 
indicator" within the message. In the present case, since 
coordinates are a common method of designating points 
within a square, we have arbitrarily given the vertical and 


horizontal coordinates the numbers 1 through 6. 


A search for the "message indicator" follows along the 
following lines — 

Since a "message indicator" is usually found in the 
first several or last several groups of a message, we might 


make a tabulation such as the following: 


Message 3rd 2nd 
Begins from from 
Message with Group lst 2nd 3rd Final Final Final 
__No. Column Count Time To From Group Group Group...Group Group Group 
1 54 38 0530 ABC GGG 08 92 53 31 12 92 
2 14 40 0650 GGG ABC 27 60 12 65 39 Ss 
3 36 37 0655 XYZ STS 06 64 65 21 it 85 
4 36 30 0700 ABC GGG 06 64 65 14 51 17 
= 14 31 0725 XYZ STS 27 60 i 90 36 24 
6 aS 31 0805 ABC GGG 45 ne LL 59 63 4l 
7 36 36 0910 STS XYZ 06 64 65 56 55 29 
8 22 29 1030 XYZ STS 85 Ze 62 16 03 33 
10 32 30 1110 GGG ABC 74 00 4) 65 39 8s 
a: 22 36 1200 ABC GGC 85 22 62 ee 39 $4 


It is noted that in each case where messages begin with 
the same "additive", 1.e., where messages begin at the same 
point within the enciphering square (in this case a 6 x 6 
square), though the first three groups of the messages are 
similar, the last three groups are different. From this we 


may assume that the "message indicator" is in the first 


« 1D = 


three groups of a message rather than in the last three groups. 


There is another point that we should consider: if we 
presume that the "message indicator" is one group, the text 
of a message will actually begin not with the "beginning 
point" indicated in the tabulation above, but with the next 
point; that is, if the tabulation shows that a message begins 
with column (or point) 54, the actual beginning of the 
message would be 55. Let us now look at the first three 
groups of each message, together with the now, revised 


actual "beginning points" of the messages: 


Message Begins 


with Column lst Group 2nd Group 3rd Group 
a5 08 92 5.5 
15 27 60 a2 
412 06 64 65 
41 06 64 65 
LS 27 60 dad 
34 45 39 nlccle 
414 06 64 65 
2.3 35 Ze 62 
313 74 00 4l 
23 85 22 62 


From the three groups at the beginning of a message can 
we now somehow come up with the "beginning point"? We see 
success very quickly: if the 3rd group is subtracted (without 
carrying) from the lst group, the result is the "beginning 
point"! Thus, for example, in the first message, 08 - 53 
= 55; or in the second message, 27 - 12 = 15, etc. It is 
therefore likely that the "message indicator" is the first 
group of the message, obtained by adding the "beginning 
point" of the "additive" used to the second enciphered code 
group (which becomes the third group in the message when the 
"message indicator" is placed as the first group).3 
2. The "beginning point" following 36 is 41. 


3. It is true that the "message indicator" might have been 
formed by subtracting the "beginning point" from the first 
group and then inserted as the third group in the message. 
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A few comments may be made here: 


In the present case we had very fortunately (or luckily) 
designated the columns of the worksheets (containing the 
messages "in depth") with the correct, as it turned out, 
"additive" square coordinate designations. [In actual 
practice, however, the cryptanalyst must consider that the 
columns, though in relative correct order, may not be 
correctly designated. With sufficient number of messages, 
however, and taking into consideration those messages that 
have been enciphered with "additive" one position removed, 
Or on the same row of the "additive" or enciphering square, 


the "message indicator(s)" may still be identified. 


In the present case, too, only the "beginning point" 
of the "additive" used was enciphered (by adding the 
"beginning point" to the second enciphered Sroup), at 
often the message indicator will indicate the group-count 
of the message and perhaps even the ending point of the 
vadditive used". Thus, the message indicator(s) may 
serve many multiple purposes other than merely conveying 


the "beginning point" of "additive" used. 


In the present problem we first put messages "in depth" 
and then attacked the indicator system. [In actual practice, 
however, the cryptanalyst would probably have attacked the 
indicator system first, then put the messages "in depth", 
Since the solution of the indicator System would have made 
the task of putting messages "in depth" almost mechanical. 
If the initial attack against the indicator System failed, 
the cryptanalyst of course could still fall back upon 
putting messages "in depth" simply by means of repetitions 
or "hits" between messages. 


The student should realize that there are innumerable 
methods of enciphering "message indicators". Sometimes 
there is a completely different system, distinct from the 
system used for enciphering the coded text, used for 
enciphering indicators. The concept or idea of using one 


or more groups of enciphered (coded) text as key for the 


ee 


encipherment of the "message indicator", however, is common. 


Let us turn our attention now to the problem of "stripping" 
additive from the messages "in depth". For convenience we 
have eliminated the "message indicator" groups from the 
messages "in depth" and again for convenience we have re- 


numbered the columns on the worksheets simply from 01 to 36. 
Ol 02 03 04 05 06 O7 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 


eS ee Se Te ee 
193 15 12 75 32 76 10 13 78 51 65 20 52 48 00 59 54 49 49 45 16 17} 


#2(60 12 01 44 94 70 70 41 37 05 99 30 11 76 45 11 80 802 


“62 11 66 98 95 65 88)2 #3(64 65 43 213 

528 86 42 13 41 76 59 05 57 57 96 57 18 85 00 21 11 85)3 

493 78 55 44 66 55 03 39 14 51 17)4 #4 (64 65 84 37% 
#5(60 12 38 43 51 26 15 43 35 13 92 48 27 76 64 87 43 45° 

628 32 43 13 50 34 59 63 41)® #6(59 11 70 56 54 64 436 

1172 21 41 96 52 12 84)?! #7(64 65 72 417 


708 86 38 79 24 28 75 21 03 26 57 78 13 42 56 55 29)7 
#8(22 62 44 29 66 69 06 59 39 50 99 79 64 748 
1062 11 66 98 95 65 gg)!0 #10(00 41 27 81 36 73 79 43/0 
#11(22 62 85 35 18 69 08 69 75 02 64 45 94 2}!1 


as 24 25 26 2 2a 28 30) Bil 32 3B 34 356 Se 


18g 61 41 32 31 12 92)! 

#1(92 53 78 57 17 24 55 451 
236 84 41 43 66 56 48 61 94 28 82 59 03 122 
330 30 75 51 83 31 84 50 12 11 40 74 11 813 
482 30 77 59 85 23 81 06 94 46 36 40 38 494 
"73 76 50 99 31 39 81 17 08 90 36 24)5 
609 84 61 40 10 12 17 69 74 29 17 60 lo @1° 
736 65 79 59 85 23 81 46 58 11 25 31 29 997 
515 80 50 23 66 95 84 75 08 00 28 16 03 33)8 
1091 76 68 59 85 03 78 47 83 57 82 59 03 1210 
1157 06 68 O07 20 31 48 42 58 42 51 03 57 35)1 


To commence our attack against the messages "in depth" 
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we naturally will take advantage of any collateral inform- 
ation we might have concerning the enemy's method of 


writing messages, phraseology, stereotypes used, etc. 


If we have been "reading" previous messages, perhaps 
in a different system, we will have a good idea of the 
"form" in which the enemy produces their messages. Or we 
may have available simultaneous with the enciphered 
messages, other messages in plaintext. It may happen, for 
example, that the same numbering system is used for both 
plain and enciphered messages. By taking advantage of the 
times of intercept of all messages we may even be able to 
forecast not only the location of the message number in an 
enciphered message, but the message number itself! Thus, 
normally a so-called "blind attack" against a system is 
not made: there should almost always be some information 
of a collateral nature which will assist in identifying 


probable words (or perhaps even phrases) in an enciphered 
message. 


In the present instance we have available one plain- 
text message: 


Message No. 9 

(intercepted at 1045 hours) 
XYZ de STS 

Group count 9. 


TO ALBERT STOP CASUALTIES HEAVY WE ARE BEING OVERRUN. 


We also have collateral information obtained through 
traffic analysis: not only have we identified the call-signs, 
but we know the names of the commanders of the enemy units 


concerned. 


From this available information we have a good idea of 
at least some of the words in the enciphered messages. Let 
us see now how we use this information. 


Consider Messages Nos. 3, 4, and 7 which begin at the same 
point and use the same additive. It is noted particularly 
that the first two groups of each message are the same. 
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LS 20 2) 22 2a! 24,25 26 27? 28 29 30 BL 32 3S 


#3(64 65 43 21 30 30 75 51 83 31 84 50 12 11 40... 
#4(64 65 84 37 82 30 77 59 85 23 81 06 94 46 36... 


#7(64 65 72 41 36 65 79 59 85 23 81 46 58 11 25... 


Let us underline the repetitions or "hits" between these 


three messages: 


9 20 2h 22 20 24 25 26.27 22 29 30 3h 32 33 
#3(64 65 43 21 30 30 75 51 83 31 84 50 12 11 40... 


#4(64 65 84 37 82 30 77 59 85 23 81 06 94 46 36... 


#/(64 65 72 41 36 65 79 59 85 23 81 46 58 11 25... 


Here we might make a hypothesis: Since the plaintext 
message, above, began TO ALBERT STOP, can it be that the 
enciphered messages also begin with the word TO and contain 
perhaps the word STOP? 


From the call-signs let us see to whom each message is 


going: * 
Message 
No. Call-signs TO 
> XYZ de STS ALBERT 
4 ABC de GGG JONES 
7 STS de XYZ GRANT 


We are immediately struck by the possibility now that 
each group represents a single plaintext letter! If this 


is correct, this would explain why the first two groups 
are the same: they represent the word T O. 


eee 

4. Call-signs such as "XYZ de STS" means that the message 
is being transmitted to XYZ from STS. Thus, the radio 
abbreviation "de" means "from". See pages 3 and 4 for 
the identifications of the call-signs and identification 
of personnel in the units. 


oe TO a 


Confirmation of our identifications, 00 = t, and 08 = Ss, 
appears when we look at column 27 where the additive becomes 


Say Den f 


i 
(ee) 
un 


relative additive 


Placode = 08 


Placode = 00 


Pplacode = 00 


Additional identifications are evident when we look at 
other columns. The placode group for the letter "r" is 
obtained when we put the placode values for "s" and "t" in 


column 25: 


relative additive = 79 


placode = 06 


placode = 08 


Placode = O00 


With placode group 06 = r, we may insert this value as 
"r" anto column 22 and find the placode values of "1" and 


to. 
22 


relative additive = 45 


placode = 86 


placode = 92 


placode = 06 


Column 29 yields the placode value of the letter oe Thad 


29 
relative additive = 92 


84 
Placode = 92 
O 


Bl. 
Placode = 99 


P 


81 
placode = 99 


Pp 
We now have six placode values: 86 = 1, 92 = 0, 99 =p, 
06 =r, 08 = s, and 00 =t. 


When Messages Nos. 6 and 10 are added to the above three 
messages (Nos. 3, 4, and 7), many additional placode values 
can be found: 


Lo £0 bd? JB wo 20 21 22 23 24 25 26 27 28 29 36 


additive = 45 79 51 85 _—92 
#3(64 65 43 21 30 30 75 51 83 31 84 50 
86 06 00 08 = 92 


sO ea tb & ¢ €@ B&B € SG B 


#4(64 65 84 37 82 30 77 59 85 23 81 06 


92 08 08 00 vo 
to j O n @ 8 S&S t oO p 


#7(64 65 72 41 36 65 79 59 85 23 B1 46 
O06 00 08 00 29 
tograntgs to p 


#6(59 11 70 56 54 64 43 09 84 61 40 10 12 17 69 


O8 92 99 35 25 
to jf O nN @ gS Bt o p 


#10(00 41 27 81 36 73 79 43 01 76 68 59 85 03 78 47 
08 29 08 OO 86 


® © €§ hth tt bh & £ G&G pe +t 
It is evident that columns 23 and 24 will yield the 


placode values: 39 = b, 81 =n, 35 = a, and 56 = e. 


With the numerous placode values already recovered, 
with many more almost mechanically capable of being 
recovered, the entire solution of the present "Miniature" 
problem is virtually assured. At this point the entire 
solution is left to the student. 


- OG = 


with the premise that the code groups represent single 
plaintext Letters we may insert into the messages the 


presumed stereotype message beginnings: 
19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 


ee 
t3(64 65 43 21 30 30 75 51 83 31 84 50 12 11 40... 
toatlboort sp to p 


77 59 85 23 81 06 94 46 36... 
5 8s t oOo p 


(ah ee 


4 (64 65 84 37 B2 30 
& o J O n @ 


#7(64 65 72 41 36 65 79 59 85 23 81 46 58 ll 25... 
t ogreaern t & tt & Pp 
The code group 30 representing the letter "e" in column 
24 in two messages looks good! And the repetition of 
59 85 23 81, representing the word "stop" in two messages, 
also looks good! At this point it looks as if we are on 
the right track. 


We may now establish an arbitrary base for the basic, 
unenciphered code, or placode. We do this by merely 
assuming that a particular "plaintext equivalent" 
represents any selected number. For example, we may 
select the group 00 as the placode equivalent of the letter 
"t". Inserting 00 into column 26 as the placode equivalent 
of "t" yields 51 as the relative additive for that column; 
and with the additive then known for the column (51), the 
placode group 08 is found to represent the letter "s". f[his 
may be shown as follows: 


26 
relative additive = a4 


= sxe 


51. 
Placode = QO 


Placode = O08 


Placode = OQO8 


There is, however, a point which should be discussed 
here. This concerns the "relativity" of both the additive 


and the placode groups so far recovered. 


Consider the placode groups that have to this point been 

recovered: 

= 35 
= 39 
= 56 
= 86 
81 
= 92 
= 99 
= 06 
= 08 
= 00 


rine DU O FS + ODO Oo DM 
il 


If the student will remember, the first placode identification 

made was the arbitrary designation of "t" as OO. Thus, all 

the identifications (as well as the "additive" recovered) made 

to this point are based relatively on t = 00. The chance is 

very slim, of course, that in the actual code t = 00; but as 

far as our "solution" is concerned, as long as the placode 

groups are relatively equal to one another, and as long as the 
recovered "additive" is again relative to our established 


base (t = 00), messages can be read with PCtle Giiricwity. 


For various reasons, however, it is usually desirable to 
bring the solution to the same base as the original code. 
Often this cannot be done; but sometimes there are "guides" 
which will enable the analyst to adjust the recovered code 
groups to the original base. For example, in the case of a 
four-digit code, the digits may have as their placode 
equivalents the groups 0000, 1111, 2222, etc., and with these 
as a base for the digits 0, 1, 2, etc. the placode groups 
can be made relative to the Original code. In the case of 
a one~part basic code, the problem of putting recovered 


placode groups on the same base as the Original code groups 


— 2 


is greatly facilitated. Consider the present "miniature" 
problem. From the order of the digits in the first position 
of the so far recovered placode groups relative to the 
letters of the alphabet in alphabetical order, it is fairly 
evident that we are dealing with a one-part code. That 1s, 
when the plaintext equivalents (in this case the letters of 


the alphabet) are put in alphabetic order, the placode 
groups will be in numerical order. 


Let us again take a look at the placode groups that have 

to this point been recovered: 

= 25 
= 39 
= 56 
= 86 
= 81 
= 92 
= 99 
= 06 
= 08 
= 00 


| 


If we add 7 to the first position of each of the above 
placode groups, the placode group representing the letter 
"a" will begin with a "zero" which perhaps may be logical 
in the case of a one-part code. The recovered placode 
groups would then appear as: 
= 05 
= 09 
= 26 
= 56 
Sal. 
= 62 
= 69 
= 76 
= 78 
= 70 


tn KH TO 3S FO OD DW 
Ul 


Though the first position of the groups now "looks good", 
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the placode groups are still not completely in numerical 
order. A little study will show that the only way in which 
all of the placode groups can be put in complete numerical 
order is to add 8 to the second position. The placode groups 
will then become: 

= 03 

= 07 

= 24 

= 54 

59 

= 60 

= 67 

= 74 

= 76 

= 78 


rT OHM KT O 3S FPO YD D 
Il 


We might assume then, at least to this point, that these 
placode groups are those of the original code. 


THE CONCEPT OF "DIFFERENCES" 

Before leaving the present problem there is one important 
item concerning "additive" systems in general which should 
be discussed. This concerns the concept of "differences" 
which the student should thoroughly understand if he wishes 
to be successful in cryptanalyzing an "additive-type" 


enciphered code system. 


The concept of "differences" is based upon the fact that 
the difference between two placode groups is the same even 
though both are enciphered with the same additive. For 
example, the difference between the placode groups 24 ("e") 
and 03 ("a") is 21. If both are enciphered with an additive, 
say 62, the resulting encicode groups will be 86 and 65, but 
the difference between the two still remains 21. (Note, 
incidentally, in taking the difference between two groups, 
we make the subtraction so that we will come up with the 


smallest difference, not the reciprocal larger difference.) 


Let us examine now the use of this concept of "differences". 
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In the above list of recovered placode groups we may 
extract those that we might expect to occur most frequently. 


For example, we might extract the groups: 


a = 03 
e = 24 
n= 59 
o = 60 
r= 74 
s = 76 
t = 78 


A "Difference Table" may now be constructed for these 


high-frequency groups as follows: 





Note, again, that in subtracting one code group from 
another, the subtraction is made so that we will arrive at 
the smallest "difference" between the two groups, not the 
reciprocal larger difference. Thus, the "difference" 
between 03 and 59 is 54, not 56. 


If these high-frequency placode groups occur within a 
particular column, we would expect to find these same 
"differences" within the column — even though an additive 
has been applied to the column. To prove this, let us 
take, as an example, column 31 from the messages "in depth" 
on page 15. The column contains the following encicode 
gfoups: 78, 94, LZ, 94, O58, 74, 38; OB, B3, 58, 


A "Difference Table" is constructed for these groups, 
eliminating those groups which occur more than once. (The 
multiple occurring groups, of course, are likely to be 
high-frequency groups.) 
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We may now compare the "“encicode group" differences 





column 31) with the “high-frequency group" differences: 


High-Frequency Placode 


Group Differences 


76-74, 


78-74 
60-59 
74-60 
76-60 
TS= 60 
24-03 
74-59 
16-39 
ope 


03-78, 


03-76 
03-74 
03-60 
60-24 
24-74 
76-24 


U3-B 2, 


18-76 


59-24 


(74-24) 


78-24 


Encicode Group Differences 


of Groups in Column 31 


NO 
00 
rot thd dot bd wt uw ob de ow wm oma 


78-74 
94-83 


Ons “Oe » 


83-78 
83-74 


78~58, 


08-83 


94-78, 


12-94 
08-78 
08-74 
83-58 
12-83 
12-78 


94-58, 


12-74 


12-08 


94-74 


74-58 


598-12 


(from 


08-58 (58-08) 


The common differences in the above two lists may now be 


tabulated and the value of the additive necessary to make the 


high-frequency placode differences equal to the encicode 


group differences may be computed: 


High-Frequency Placode 


Group 


NO 
Nn 
ou db wu uw ow wet 


Differences 


78-74 
60=59 
74-60 
74-59 


03-78, 


03-74 
60-24 
14-74 


y= 2 4 


(74-24) 


Encicode Group Differences + Additive 
in Column 3l Necessary 
O04 = 78-74 00 
ll = 94-83 34 
14 = 08-94, 12-08 34, 48 
25 = 08-83 34 
35 = 83-58 80, 34 
39 = 12-83 19 
46 = 94-58, 58-12 34, 98 
590 = 08-58 (58-08) 94, 34 


I 
NO 
On 

{ 


It is apparent that 34 stands out as the "additive" in 
Column 31. Thus, with 34 as the "additive" in Column 3l, 
the resulting placode groups will predominantly be the 
"high-frequency" placode groups already identified: 

Sik 


additive 34 
78 
placode 44 

















94 
placode 60 

O 

12 
placode 88 high-frequency 

Speen ease es SPOON Pe aie es plaintext 

94 letters 

placode nan 


placode 





placode 
placode 
placode 
placode 


placode 


During the stage of the solution of an additive-type 
System which comes after a number of messages have been put 
"in depth", differences may be used to put columns on a 
common base, even though no placode groups have yet been 
identified. For example, consider the worksheets on page 
15. Without any knowledge of the placode groups, let us 
attempt to put the arbitrarily selected columns 32 ana 34 
on the same base. 


"Difference Tables" are constructed for the encicode 
groups in columns 32 and 34 as follows: 


a me 


Difference Table — Column 34 


59 74 40 60 31 16 03 
35 |50|26]46|17| 18] 21 






Difference Table — Column 32 





Though encicode groups may repeat within a column, 


that they likely are high-frequency groups, still for the 


purpose of the "Difference Table" they are counted only once. 


The common "differences" between the two Difference Tables 


are now tabulated; and the relative “additives" necessary to 


be added to the encicode groups of Column 32 in order to make 


the groups equal to the encicode groups of Column 34 are 


computed: 


Encicode Group 
Differences in 


Column 34 Column 32 
= 60-59 ll = 57-46, 
= 31-24 Lv = 23—Lh 
= 24-16 18 = 29-ll 
= 24-03 21 = 11-90 
= 59-31 28 = 46-28, 
= 59-24 35 = 46-11 
= 31-03 38 = 57-29, 
= 03-74, 60-31 39 = 29-90, 
= 16-74 42 = 42-00 
= 59-16, 74-31, 43 = 90-57 
03-60 
= 60-24 46 = 57-11, 
= 60-16, 03-59 54 = 90-46 


Encicode Group 
Differences in 


11-00 


2680.0 


28-90 
5/=-28 


46-00 


Relative additives 
added to Groups in 
Column 32 


39 


24 
3 


Of the twelve common differences between Columns 34 and 


32, in nine of them, if 13 is added to the encicode groups of 


bh BY t 


indicating 





Column 32, the groups (giving rise to the common difference) 
in Column 32 will equal those groups in Column 34. Thus, if 


13 is added to the groups in Column 32, both columns will 
likely be on the same base. 


At this point we shall take leave of this "miniature" 
enciphered code problem. If the student understands the 
solution which we have discussed, there is no reason why he 
should not be capable of solving completely the principal 


problem, the piece de résistance, in the next two chapters. 
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CHAPTER II 


PRELIMINARY REMARKS CONCERNING THE PROBLEM 


The enciphered code problem which the student will face in 
the next chapter is an exceptionally good one. The problem, 
however, is not easy. The problem cannot be solved overnight, 
nor even in a week or two weeks. It will take the average 
student perhaps three or four months of several hours daily 
work to complete solution of all the messages. But the time 
will be well spent! The student will certainly receive a 
good deal of self-satisfaction from his solution. More 
importantly, he will have had a tremendous amount of enjoy- 


ment as he learns about an aspect of cryptanalysis that likely 
will be new to him. 


Let us now take a look at this problem — 


The scene of the problem is North Africa in January 1941. 
This problem, in English, was constructed by British 
cryptographers to duplicate the situation as well as the 
cryptographic systems then being used by the Italian Army. 

The purpose of this problem was to train British cryptanalysts, 
and especially those who would later face real Italian Army 


trariire 2m North Atrica., 


Solution to the problem will take certain steps: 

(l) First, from examination of the traffic certain tentative 
assumptions can be made. It is seen that the traffic consists 
of 29 messages, one of which, Message No. 27, is in the "clear". 
It is seen, too, upon closer examination of the messages, that 
the messages seem to divide themselves into two categories, 
those that begin with ascending digits, 23456, 34567, 45678, 
etc., and those that begin with the digits 00000. We might 
make the assumption that we are dealing with two different 
systems. The "message index" (APPENDIX "B") may confirm this 
assumption, for if there are repetitions between messages that 
begin with the ascending digits, we can assume them to be in 
the same system; and if the 00000 messages have no repetitions 


with other messages, we can assume the 00000 messages to be 


a OR - 


in a system distinct to themselves. 


(2) By means of repetitions, and especially longer 
repetitions, certain messages can initially be put "in 
depth"; that is, we can be reasonably sure that these 
messages have been enciphered with the same additive. With 
the messages "in depth" groups enciphered with the same 
additive can be examined: is there any internal character- 
istic in the placode that might enable us to almost 
mechanically put all the messages "in depth"? Is there any 
other evident means of putting the messages “in depth"? 

Is it possible that there are, for example, "check groups" 
in the messages? 


(3) After putting all the messages "in depth", which is 
no small task, considering the length and number of the 
messages, can any conclusion be reached as to the total 
number of additives in the system? 


(4) With the messages "in depth" can the group or 
groups representing "message indicators" be identified? 
Here the student might keep in mind that a "message 
indicator" might indicate not only the "starting point" 
of the additive, but also perhaps the "time of transmission" 
of the message, the "group count" of the message, or the 
"ending point" of the additive. Of course not only should 
the groups near the beginning of a message be "suspect" as 
indicators, but groups at the end of the message should be 
considered as likely indicators. 


(5) The next step is to begin reconstruction of 
relative placode. Here any encicode group can be assumed 
to represent any placode value, such as 00000, and relative 
additive for one column will have been recovered. If one 
or two of these placode groups are near the beginning of a 
message, can other messages in other columns have begun 
with the same placode groups? [In other words, messages 
to the same call-signs might begin with the same placode 
groups! 


(6) At this point, attention might be made to the one 
- 25 = 


message which is in plaintext, Message No. 27: 


"FOR GENERAL GALLINA. I HAVE GIVEN ORDERS TO 
CEASE RESISTANCE. GENERAL BERGINZOLI. 18. 


The stereotype "beginning" and "ending" of this message 
indicates the probability that most of the encoded messages 
will likewise have similar "beginnings" and "endings" — 
depending of course on who is sending the message and to 


whom the message is being sent. 


Of special interest, too, is the fact that Message No. 27 
ends with a probable internal message number: 18. Perhaps 
all of the encoded messages likewise end with an internal 
message number; and might not Message No. 24, also to X from 


S, be numbered internally 17? 


(7) Finally, attention may be paid to any messages that 
for some reason or other may not have been (super) enciphered 
like the others. These few messages may be in a system of 
their own! In fact, in a sense these messages may be 
considered the most delectable portion of the entire problem, 
the dessert so to speak. How may these messages be attacked? 
Analysis should begin with the assumption that the basic 
underlying placode of these messages is similar to that of 
the other messages. Knowing the pattern of the "beginnings" 
and "endings" of messages, as well as knowing the call-signs 
of the sending and receiving stations, should provide a 
certain amount of placode which can be joined with its 
likely encicode. At this point, persevering analysis of 


placode with encicode will lead to success!° 


BACKGROUND TO THE PROBLEM 
The background to this problem is the early part of the 
British offensive in Libya in January 1941, which culminated 
with the fall of Bardia on January 5. Though the text of 


the messages is English, the contents of the messages are 


— ee a ea eet a dl a Eee 


5S. A clue, however, perhaps may be found on page 469 of 
David Kahn's fine book, The Codebreakers, published by 
The Macmillan Company, New York. 


a 


realistic representations of those of the Italian Army. 


The following extract from the Italian Order of Battle 
has recently been published by the Intelligence Branch of 


the General Staff and may be of some assistance: 


Location 

ANTONELLI General Intendant-General (Supplies) BENGHAZI 
ARGENTINO General Commanding General DERNA 
BERGINZOLI General Commanding General BARDIA 
GALLINA General Commander-in-Chief, 

Eastern Libya, at 

advanced G.H.Q. TOBRUK 
LEO Lt. Col. Officer-in-Charge, 

Saharan Battalion HON 
RUFFO Colonel Second in Command DERNA 


The Wireless Intelligence Service has provided the 


following identifications of the Italian stations concerned: 


Station Identification 
xX Advance H.Q., East Libya, near 
TOBRUK. 
Y BENGHAZI area (probable). 
Q DERNA (probable). 
S ise, BARDIA, 
N TOBRUK (Probable). 
O 


Believed to be a form of COQ Ga Li... 
a call addressed to all stations, 
Since traffic is always to 0, and 
never originates there. 


Ir HON. 


CHAPTER IIT 
THE PROBLEM 


Between 0900 hours January 1, 1941 and 1230 hours January 


5, 1941 the following 29 messages were intercepted: 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


W/T STATION FREQUENCY DATE & TIME TYPE OF SIGNALS GONIOMETRIC REMARKS 
SIGNAL STRENGTH x ee 
TO: FROM 
Y X 1/1 TRANSCRIBED 
0900 FROM ORIGINAL 


GROUPS 27 
78901 60730 74769 85760 97799 11228 73928 65464 05744 50524 
78007 09597 84359 22385 12393 78565 32842 75017 62630 71764 
40992 33739 75938 69713 19298 08276 89338 











MESSAGE NO. 1 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 












en 
W/T STATION FREQUENCY DATE & TIME TYPE OF SIGNALS SONIOMETRIC REMARKS 
SIGNAL STRENGTH FIX 
TO: FROM) 
xX 1/1 TRANSCRIBED 
0930 | FROM ORIGINAL 
GROUPS 26 


34567 60730 74769 84260 03391 18187 52608 65464 172435 64171 
07778 09597 48828 00755 53504 79786 97224 06828 90818 47758 
84147 31012 75938 79319 69898 42339 


MESSAGE NO. 2 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


TYPE OF SIGNALS 
SIGNAL STRENGTH 












GONIOMETRIC 
FIX 












W/T STATION FREQUENCY DATE & TIME 





FROM: 
TRANSCRIBED 


FROM ORIGINAL 


GROUPS 29 
23456 51747 33040 45035 92588 93926 02329 56912 57146 73077 


56769 67046 94811 51690 43998 23359 04198 80160 09597 19716 
38488 39968 26233 15224 21026 14932 04830 92822 18800 


MESSAGE NO. 3 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


SIGNALS 
STRENGTH 












GONIOMETRIC 
Fix 


TYPE OF REMARKS 


SIGNAL 


W/T STATION DATE & TIME 





TO: FROM: 


TRANSCRIBED 
FROM ORIGINAL 








GROUPS 72 
18562 54198 
53285 
10746 
85047 
33316 


00000 
13917 
00510 
98051 
93162 


21388 
31834 
94490 
90702 
61012 


75980 
17584 
43118 


09987 
25231 
283574 
84663 


11084 46613 
34207 
44245 


44842 


11533 42010 
O9962 55°07 
55171 39375 
95135 42507 


88416 00894 


36417 62180 
90709 


71296 


26242 26240 


08101 22712 


75972 
50244 
74415 


22900 
96899 
11805 


56030 
Oi t 


84258 
72856 


MESSAGE NO. 4 


50890 
36254 


65938 
47309 
35184 


22762 
5 To Bt bs) 
40023 


33338 47937 
30951 59811 
48499 99003 


W/T STATION 


WIRELESS 


INTELLIGENCE SERVICE 


W/T INTERCEPT 








GROUPS 81 


67890 
04932 
06160 
36730 
27509 
47187 
00369 
24017 
96522 


85486 
97336 
08357 
27130 
08884 
15415 
vrirh 
93636 





FREQUENCY 


47842 
86649 
23453 
81966 
34096 
47831 
75296 
26300 


DATE & TIME 






72346 
90441 
48538 
40334 
68086 
74294 
56788 


34722 


65464 
39903 
81390 
41596 
35763 
63677 
59874 
08346 





TYPE OF 
SIGNAL 


70505 
49020 
02576 
62200 
augTI 
07102 
21793 
28735 


SIGNALS. 
STRENGTH 


29830 
71683 
99476 
13486 
hee Lo 
by ie 
72055 
36404 


MESSAGE NO. 5 






87014 
52245 
53296 
20413 
14421 
33428 
eB e 
04985 






FIX 


09597 
95650 
65187 
54299 
64417 
58806 
40147 
64758 










GONIOMETRIC 







71500 
715938 
01785 
46827 
12223 
74165 
10058 
39284 


TRANSCRIBED 
FROM ORIGINAL 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


: ON FREQUENCY DATE & TIME TYPE OF SIGNALS GONIOMETRIC REMARKS 
iii i SIGNAL STRENGTH FIX 


FROM: 


Y x TRANSORIBED 


FROM ORIGINAL 





GROUPS 34 

12545 79790 06707 10217 63743 40357 60398 11887 47678 55827 
21709 95294 75938 26264 42279 05420 42644 76095 54808 08066 
43865 38400 68997 36730 41301 30513 40235 79296 23341 95497 
41487 60109 56671 75931 


MESSAGE NO. 6 





GROUPS 99 
21388 75980 44010 


00000 
26590 
54220 
66120 
335314 


26217 
74425 
P2uoo 
71120 
63529 


39940 
08686 
ADIoE 
71296 


84663 
95398 
08718 
42084 
19266 


WIRELESS 


W/T INTERCEPT 


FREQUENCY 


43131 
18073 
00312 
65938 


85047 
39231 
92949 
15901 
83498 





83413 
31834 
24103 
22713 


90762 
23096 
94490 
42462 
30453 


DATE & TIME 


INTELLIGENCE SERVICE 


88488 
41401 
77584 
53463 
33316 


26212 
peo 
43118 
93639 
91160 





04010 
89989 
25231 
44217 
85330 


36011 
50602 
00677 
39286 
86733 


80086 
Dove | 
53285 
99252 
02361 


92403 
86357 
45747 
19584 
66301 


MESSAGE NO. 7 


Bg 





89054 
59811 
58327 
61012 
Poo he 


14384 
98842 
79769 
68115 
44710 












GONIOMETRIC 


FIX 


39823 
50244 
02484 
08101 
98051 


54683 
DD 747 
18059 
02849 
88393 





719278 
85833 
24687 
22710 
90742 


06696 
00243 
08737 
24021 


REMARKS 





(em a ee 


oS 


TRANSCRIBED 
FROM ORIGINAL 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


SIGNALS | GONIOMETRIC 
STRENGTH FIX 





TYPE OF REMARKS 


SIGNAL 


W/T STATION FREQUENCY DATE & TIME 





TRANSCRIBED 
_| FROM ORIGINAL 

GROUPS 110 

34567 83185 93757 32758 87550 31934 14969 29692 23363 60274 
81885 09597 56195 88927 00084 63234 18783 08863 78992 00915 
01548 09118 75938 24194 08438 05789 88902 96446 51798 31508 
44590 76924 61728 36730 74908 69899 40415 57276 57896 
20323 28133 46827 27509 08884 34096 saR6eE 95886 45027 
87152 04412 12133 11021 15415 47831 74200 61738 80503 
26026 53883 55341 03734 57191 08894 56788 00454 16951 
68942 54137 54707 47383 97777 17927 01109 52660 69815 
94749 42416 52566 19857 13846 32538 49485 72296 28563 
89954 80941 85636 26488 22813 44911 25161 62200 78968 
40436 59777 97021 00194 08563 02651 88039 76585 16901 


MESSAGE NO. 8 


40 - 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


W/T STATION FREQUENCY | DATE & TIME TYPE OF SIGNALS GONIOMETRIC REMARKS 
SIGNAL STRENGTH FIX 
TO: FROM: : 
X Y 2/1 TRANSCRIBED 
1900 FROM ORIGINAL 








GROUPS 23 


45678 27678 86657 85127 09743 50429 52304 42160 62278 10915 
35347 89450 72296 49146 982135 25433 01091 92472 67275 70753 
76254 77776 68076 


MESSAGE NO. 9 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 











W/T STATION © FREQUENCY | DATE& TIME TYPE OF SIGNALS GONIOMETRIC REMARKS 
SIGNAL STRENGTH 
TO: FROM: 
3/1 TRANSCRIBED 
P | Q 1100 | FROM ORIGINAL 
GROUPS 36 


00000 47039 47124 87057 81440 59500 37134 40452 95726 22773 
33306 22772 33306 43769 22367 30912 23938 92842 45442 63306 
18447 00203 55463 89546 03256 62701 93387 47957 56542 52461 
35134 63029 00598 93272 62725 11364 


MESSAGE NO. 10 





TO: 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


TYPE OF SIGNALS | GONIOMETRIC ic! REMARKS” 

SIGNAL | STRENGTH | Pf 
TRANSCRIBED 
FROM ORIGINAL 








DATE & TIME 








W/T STATION FREQUENCY 
FROM: 
: N 


GROUPS 38 

00000 21388 75980 09987 18562 91842 97538 17722 64318 33230 
00454 39039 68539 09612 57916 79479 95167 20190 55088 76089 
28079 47545 19419 63281 63442 81194 25979 32175 10780 39412 
65663 80494 85667 40023 48499 99003 74415 11863 


MESSAGE NO. 11 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


W/T STATION FREQUENCY | DATES TIME TYPE OF SIGNALS — | GONIOMETRIC REMARKS 
SIGNAL STRENGTH FIX 


TO: 


CQ 


FROM: 


TRANSCRIBED 
FROM ORIGINAL 











GROUPS 43 


23456 88476 26633 34123 40178 62293 83786 64990 78893 89717 
38014 02400 56912 57155 47135 70400 87569 84180 00854 12944 
18406 34459 79225 09597 73316 05660 16641 31186 37132 26961 


65220 60869 71596 65982 75938 45328 08438 11367 53532 99303 
108350 02314 75658 


MESSAGE NO, 12 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 
















W/T STATION FREQUENCY DATE & TIME TYPE OF SIGNALS GONIOMETRIC REMARKS 
SIGNAL STRENGTH : 
TO: FROM: 
Y x 3 rf TRANSCRIBED 
1300 PROM ORIGINAL 
GROUPS 24 


56789 77418 56912 55401 23130 05042 22899 08618 97104 09620 
49527 95207 50656 08547 09597 81528 74554 53504 92227 65071 
32860 99163 90656 15734 


MESSAGE NO. 13 


W/T STATION 





FROM: 





WIRELESS 


GROUPS 88 


67890 
41828 
81818 
45883 
02090 


Poon 
18029 
05306 
78968 


82825 
89803 
20387 
19701 
82206 


16784 
98855 
95252 
90194 


FREQUENCY 


15938 
65060 
68171 
50827 
45042 


41738 
08999 
07828 
07645 


DATE & TIME 


“Ty 
1600 


03447 
70915 
69152 
27298 
26325 


31940 
14665 
53760 
66919 


14724 
36730 
31762 
16468 
04697 


17632 
99640 
wie ee 
21177 


TYPE OF 








SIGNAL 


18774 
313582 
08884 
29362 
05236 


78394 
46021 
49149 
60802 


MESSAGE NO, 


59512 
03546 
86724 
47831 
92941 


94186 
10956 
05595 
5257 


14 






~ 





95925 
40424 
06233 
45300 
56788 


49689 
60770 
45609 
20881 


GONIOMETRIC 


INTELLIGENCE SERVICE 


W/T INTERCEPT 


SIGNALS 
STRENGTH 





FIX 


78320 76911 
43631 73327 
88907 72116 


12829 92523 


13846 79249 


08346 52660 
17815 72296 
73039 30727 


TRANSCRIBED 
FROM ORIGINAL 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


DATE & TIME TYPE OF SIGNALS 
SIGNAL STRENGTH 

















GONIOMETRIC REMARKS 


W/T STATION 
FIX 


FREQUENCY 





ee 


TRANSCRIBED 
FROM ORIGINAL 





TO: FROM: 





GROUPS 48 

12345 93205 29567 49097 61498 79034 57357 57180 20323 23570 
81265 59019 08884 34951 35339 11080 39132 97787 91140 04594 
39477 99025 85071 47831 22198 55249 15117 43616 26038 31023 
82412 00853 89695 17876 56788 32008 20530 35625 01877 90742 
49854 49894 38560 43563 52956 28816 08346 96517 


MESSAGE NO. 15 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


TYPE OF SIGNALS | GONIOMETRIC REMARKS 
SIGNAL STRENGTH FIX 










W/T STATION FREQUENCY DATE & TIME 


















TO: FROM: 
x Q 4/1 TRANSCRIBED 
_ 0630 FROM ORIGINAL 
GROUPS 35 


23456 71390 30934 45914 31563 01839 26488 36266 48201 02260 
76842 33636 78968 74472 23223 19621 87995 19234 20686 45136 
T4412 24455 86493 56912 74309 91669 69083 79291 73568 28854 
15700 22645 05583 90584 64880 


MESSAGE NO. 16 





WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


FREQUENCY DATE & TIME TYPE OF SIGNALS GONIOMETRIC 
SIGNAL STRENGTH FIX 
X 4/1 
1200 





FROM: 
cq |. TRANSCRIBED 
FROM ORIGINAL 








GROUPS 97 


45678 
17048 
15871 
02514 
39614 


67610 
56788 
95594 
29546 
22602 


06788 
60039 
31467 
26776 
39270 


63497 
07385 
08346 
17648 
40914 


67332 
01655 
17429 
14358 
08245 


14594 
84892 
04073 
72296 
7102 13 


09839 
84754 
935788 
22459 
94260 


f2nr9 
75765 
68877 
57638 
78968 


20013 
74917 
14997 
Bey | 
10431 


89892 
45195 
30482 
93647 
524235 


MESSAGE NO. 


09597 
69126 
65187 
34441 
48702 


12916 
72085 
96447 
68574 
90932 


49 - 


92628 
Yeg20 
19066 
09782 
12214 


97446 
49728 
52566 
08687 
75623 


ii 


58839 
25178 
36730 
54989 
aI 502 


04794 
24022 
86992 
17014 


43662 
96522 
19431 
08884 
52147 


Yeoe> 
50062 
+ ik 4 
393574 


22897 
435051 
89180 
52103 
47831 


25204 
27248 
99571 
56639 


INTELLIGENCE SERVICE 


INTERCEPT 


SIGNALS Bonionaereic | 
Sietparny fry 


WIRTLESS 


W/T 


DATE A T(tse 


4/1 
1700 


om ee ee ele et 


PREOUENOY ret oF | PEMAAD KS 


W/) MATION 
SIGHAL 


ee eee 





——-- §» tee 


TRANSCRIBED 
YROM OHIGIBAL 


= a AGREE i NE ee ce 


1) hHOM, 





GROUPD UO 


OOOV0 
YE94d9 
VI9AY 
93107 
O1922 


O9457 
66155 
2a 94 


97957 


PTAHU TYOBO 14006 15426 


VAT 
PHY72 
QUAO 
Aqores 


99375 
10512 
4515 
40024 


ASI92 9150 


W4QU4 


29754 


50555 31354 


HALA 


11146 


55908 44010 


22153 


19278 


44550 25308 
4499 99003 


MESSAGE NO. 


90213 
16167 
11504 
10253 


HHA 86 
26590 
67045 
717415 


OHAWGA 
W154 
26103 
9528 


971201 


TH207 
59940 
16168 
11860 


59020 
502468 
45776 
95589 
66049 


06423 
44131 
990068 


16 


31364 
20807 
54196 
33258 
85763 


82065 
50461 
76528 


99498 08718 
49010 23147 
11084 03512 
41785 91152 
89077 67272 


69523 37234 
05164 33922 
10566 49364 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 





W/T STATION FREQUENCY DATE & TIME TYPE OF SIGNALS GONIOMETRIC REMARKS 
SIGNAL STRENGTH FIX a 
TO: FROM; | 
X Q 4/1 TRANSCRIBED 
1630 FROM ORIGINAL 
GROUPS 29 


56789 06441 89418 91468 84355 75498 82206 07408 08577 57290 
10435 52639 56788 78449 53531 15104 39065 54446 18307 59348 
74876 39324 00716 08346 62087 24802 13109 01136 73214 


MESSAGE NO. 19 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 





W/T STATION FREQUENCY DATE & TIME TYPE OF SIGNALS GONIOMETRIC REMARKS 
SIGNAL STRENGTH FIX 
FROM: , ~~ wf hg eee =. OT 
x S 4/1 TRANSCRIBED 
1700 FROM ORIGINAL 
GROUPS 81 


89012 13667 74422 09942 61114 58774 78168 02576 07551 43865 
76924 61728 36730 16028 66495 24853 84149 09689 22683 20323 
21245 29739 47022 08884 82071 31613 79059 43139 50007 07484 
07101 27078 20218 92134 47831 18576 49284 58574 72333 44305 
02095 97571 99387 10260 25204 56788 63375 98430 19149 02646 


56690 31931 20409 72019 39243 82716 08346 49859 70204 83801 
49780 44138 57924 22564 47562 62651 91786 72296 10144 63305 
60912 01910 26488 23020 67596 72691 69334 59050 03458 78968 
4933 


MESSAGE NO. 20 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 























DATE & TIME TYPE OF SIGNALS GONIOMETRIC REMARKS 


W/T STATION 
SIGNAL STRENGTH FIX 


FREQUENCY 


TO: FROM: 


TRANSCRIBED 
PROM ORIGINAL 





GROUPS 34 

78901 38482 97787 01247 54761 40195 91932 49674 73800 27054 
16174 02063 08346 30359 25401 57776 44284 33053 42160 55690 
42953 60245 02579 72296 05225 92627 10409 01091 92472 73877 
77612 60934 56456 68146 | 


MESSAGE NO. 21 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


SIGNALS GONIOMETRIC 
STRENGTH FIX 


REMARKS 


W/T STATION FREQUENCY DATE & TIME TYPE OF 
SIGNAL 


TO: FROM: 


TRANSCRIBED 


; 5/1 
FROM ORIGINAL 


- 0700 





GROUPS 77 


67890 
Poaeo 
Da22e 
21934 
20404 


70621 
40257 
90106 


60730 
09597 
aon 7 
17419 
09860 


19538 
53883 
67638 


74769 
82140 
715938 
10857 
31895 


63421 
39073 
65837 


08760 
45666 
17283 
36730 
89332 


27801 
75669 
18061 


03391 
02756 
Sweep: 
18954 
08884 


T>e56 
05236 
52002 


18187 
84284 
42961 
03645 
02142 


4783 1 
fan 7 
28044 


52608 
31450 
04438 
31439 
95240 


98887 
56788 
73169 


MESSAGE NO. 22 


65464 
97241 
25035 
84149 
51771 


63596 
69119 


711543 
90818 
52867 
09689 
46489 


35519 
99501 


87203 
59426 
10494 
49017 
23198 


25954 
43804 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


SRLS SONIOMETIIG TO REMARS ee 
W/T STATION REQUENCY | DATE A TIME TYPE OF SIGNALS GONIOMETRIC REMARKS 
SIGNAL STRENGTH FIX ; 
— 2 nn cee | “PRANSCRIBED 
FROM ORIGINAL 


GROUPS 48 











12345 86714 66802 86317 82621 90981 52159 75938 48550 08438 
45193 22732 56854 02495 19769 78117 65961 41821 36730 56164 
95398 49245 48749 34158 61477 07169 90806 19054 58938 08884 
06809 80402 50763 38802 13359 87186 35420 86088 54569 81059 
47831 30457 39661 89113 96633 02599 82044 97857 


MESSAGE NO. 23 





WIRELESS 


eS FREQUENCY 


GROUPS 62 


34567 
78420 
21802 
42815 
52962 


22057 
48550 


09659 
30525 
56639 
09082 
96934 


07152 
42274 


W/T 


08346 
62677 
Open i 
17410 
67027 


11901 


24805 
85249 
76966 
35872 
70558 


11887 


INTELLIGENCE SERVICE 


dll 


DATE & TIME 


TYPE OF Ra org = 
SIGNAL 





28735 
72296 
59159 
72943 
16312 


66802 


36404 
74621 
78968 
i hee 
49097 


82621 


04985 
06765 
48188 
56912 
12685 


90981 


MESSAGE NO. 24 


39284 52566 
88821 89609 
28769 00719 
22897 70210 
09597 19627 


92159 75938 


TRANSCRIBED 
__| FROM ORIGINAL 


11297 
02095 
00013 
08694 
27004 


64071 


REMARKS 





WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 









GONIOMETRIC 
FIX 


REMARKS 





TYPE OF 
SIGNAL 


W/T STATION FREQUENCY DATE & TIME 


STRENGTH 





TO: FROM: 


TRANSCRIBED 


CQ FROM ORIGINAL 





GROUPS 91 


23456 
33083 
89082 
65604 
00594 


59869 
714878 
08232 
27561 
49371 


83185 
09597 
04543 
56101 
56608 


26246 
26631 
56546 
07965 


Bo iat 
82140 
715938 
63601 
19636 


80022 
88157 
14266 
52485 


33758 
45666 
97686 
36730 
41108 


97715 
90221 
49894 
42160 


87550 
02756 
56422 
719543 
08884 


95764 
0531.71 
39181 
539425 


50241 
B4284 
92853 
73187 
34906 


478351 
02642 
25307 
58450 


67713 
31450 
88908 
19968 
80402 


45435 
56788 
719983 
78896 


MESSAGE NO. 25 


a 





14676 
97241 
78320 
44143 
04960 


40196 
28462 
08346 
02533 


96743 
47116 
64675 
30747 
51971 


26419 
48531 
52561 
12276 


83197 
34577 
22322 
84730 
12755 


80503 
93195 
08847 
72296 





WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


SIGNALS 


TYPE OF GONIOMETRIC REMARKS 


DATE & TIME 
SIGNAL STRENGTH FIX 


2 em: | ce es | ce ee | eee 


N 5/1 


W/T STATION FREQUENCY 


FROM: 
TRANSCRIBED 





GROUPS 81 


00000 
74530 
91816 
67045 
09962 


24072 
44907 
poe 
88317 


21388 
22248 
39490 
47993 
36417 


28041 
10266 
35545 


75980 
60115 
43441 
11631 
62180 


41271 
85569 
pede 


1200 


06957 
20361 
Oo Silen 
91662 
43141 


83738 
42166 
04503 


12540 
17114 
54088 
51608 
99371 


eis 
95050 
59434 


22288 
18904 
Coe a 
12870 
20610 


02192 
45574 
40453 


60115 
94478 
16240 
75061 
De 1S 


Dor Bs 
11879 
91160 


MESSAGE NO, 26 





BD DOS 
63945 
77802 
44081 
08772 


02790 
92841 
86733 


00685 
63933 
16435 
55657 
40373 


aoe 
69492 
66301 


FROM ORIGINAL 


16057 
13249 
23308 
34207 
83995 


20275 
22751 
44726 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 


W/T STATION FREQUENCY DATE & TIME TYPE OF SIGNALS si a REMARKS 
SIGNAL STRENGTH 
TO: |{FROM; FROM: 
x TRANSCRIBED 
FROM ____| FROM ORIGINAL 


GROUPS 13 








FOR GENERAL GALLINA. I HAVE GIVEN ORDERS TO CEASE RESISTANCE. 
GENERAL BERGINZOLI. 18. 


MESSAGE NO. 27 


WIRELESS INTELLIGENCE SERVICE 


GROUPS 47 

56789 22805 
66151 45355 
95948 745602 
70108 18247 
75938 635991 


W/T INTERCEPT 


~owyt station =| rhequincy | patiarims | Tyr or | sienats | GonoMETKIC | AEVAALKS 
ee. nn itil | SIGNAL STRENGTH We fe 
TO: FROM: rT | | | ; | | 
00 , 5/1 TRANSCRIBED 
1230 FROM OKTOTHAL 


51OAG 51021 50758 59026 24642 786966 66186 412516 
52399 35062 O1697 10506 40462 02400 564912 57146 
HSUAA 13945 75845 65202 18406 72170 97750 09597 
03424 14805 924598 06089 906168 47758 85665 34971 
O4P5H 469110 57869 57645 12396 


MUSSAGE NO, 2b 


W/T STATION 


FREQUENCY TYPE OF SIGNALS GONIOMETRIC REMARKS 
SIGNAL STRENGTH | ARF 
Q TRANSCRIBED 
FROM ORIGINAL 


WIRELESS INTELLIGENCE SERVICE 


W/T INTERCEPT 














DATE & TIME 


FROM: 








GROUPS 21 


12345 52487 63198 61691 78601 86447 18244 72350 47851 09597 


15600 43783 78345 47196 49230 87871 00154 85903 90641 92132 
oa a Ti 


MESSAGE NO. 29 
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INDEX 


additive - 
additive systems have been used historically for 
diplomatic and military communications. w 
additive systems likely find use somewhere today. V 
additive may be recovered or solved by putting 
messages "in depth". 15 


additive usually appears on an "additive page" 
in the form of a square. 9 


characteristics of additive (groups) may be 
reflected in the enciphered code when encicode 
groups which have been enciphered with the same 
additive are examined. 


relativity of "additive". Z1=23, 30 


use Of "additive" has been a traditional and 

conventional mthod for the (super) encipherment 

of digital codes. V 
assumptions - 


certain tenative assumptions can be made from 
examination of the traffic. EAS 


see, also, "hypotheses". 


base - 


an arbitrary base for placode groups may be 
established. 18 


cryptanalyst may (in some circumstances) adjust 
recovered (placode) groups to their original base. 21-23 


differences may be used to put columns on a 
common base, even though no placode groups have 
yet been identified. 26-28 


relativity of additive and placode groups 
(may be set to any base). 21-23 
"beginning point" - 


the "beginning point" of additive used for a 
particular message is indicated by the "message 
LndLcator”. 12 


"beginnings" - 

it is good cryptanalytic practice to line up 

the "beginnings" of messages. 6 
blind attack - 


a blind attack against a (cryptographic) system 

1s usually not made — there is usually some 

collateral information available (which tells 

the cryptanalyst something about the system). 16 


- 167 - 


call-signs - 


messages to the same call-signs (may often) begin 
with the same placode groups. 31 


traffic analysis may provide "collateral 
information" in the form of identification 
of call-signs. 16 


"XYZ de STS" means message is to XYZ from STs. Lf 


"Characteristics" in the placode - 


"Characteristics" in the placode may be reflected 
in the enciphered code when encicode groups with 
the same "additive" are examined. 8 


"characteristics" in the placode may often be 
found by examining enciphered code groups which 
have been enciphered with the same additive. 7-8 


"Characteristics" of the placode (are a great 
assist) in putting messages "in depth". 30 


certain positions in the placode may be odd or even. 


digits in certain positions may "sum" to certain 
values. 7 


limitations in the placode groups, such as groups 
running exclusively from 00000 to 25000. fj 


placode groups may "sum to zero", i.e., 8976, 6068, 
O70, Gad. 7-8 


check groups - 
are there "check groups" in the principal problem? 30 


check groups are in effect "nulls" that provide no 
textual content to messages. i. 


null groups may periodically be added to the 

encicode to serve as "check groups" to insure (to 

the receiving code clerk) that the proper additive 

is being applied to the message. 9 


though the relative order of the check groups may 

be known, their relationship to the "enciphering 

square" (from which the additive comes) may not 

be known. 10 


check groups, like "characteristics" in the placode 
groups, will enable the cryptanalyst to place 
messages "in depth". Gn 10 


collateral information - 


collateral information (about a cryptographic 
system) includes the enemy's method and form of 
writing messages, phraseology, stereotypes used, etc. 16 


collateral information is often a great assist 


to cryptanalysis. 16 


= JOR = 


usually there is some collateral information 
available which will assist the cryptanalyst so 
that he does not have to attack the system 
completely in the blind. 





coordinates - 


coordinates are a common method of designating 


points or cells within a square which contains 
additive. 


the "“enciphering square" coordinate designations 


provide a means of designating additive 
"beginning points" — and such coordinate 
designations become "message indicators". 


16 


Ll-12 


14 


cryptanalytic attack against an enciphered code system - 


the first step normally consists in preparing a 
"message print" and "message index" of 
intercepted traffic. 


differences - 


cryptanalyst should (thoroughly) understand the 
concept of "differences" if he wishes to be 
successful in solving an "“additive-type" 
enciphered code system. 


concept of "differences" is based upon the fact 
that the differences between two placode groups 
is the same even though both are enciphered 
with the same additive. 


high-frequency placode group differences may be 
used to recover the "additive" of a column which 
contains high-frequency placode groups. 


differences may be used to put columns ona 
common base, even though no placode groups may 
have yet been identified. 


to obtain a "difference" the subtraction is 
made so that the smallest "difference" between 
two groups is obtained, not the reciprocal 
larger "difference". 
"Difference Table" - 
a "Difference Table" provides the differences 
between all groups (of those being considered). 
encicode - 


Aet i i, GIO» 


a portmanteau word coined by William F. Friedman. 


"hits" - 


see "repetitions". 
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As 
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24-26 


mom 268 


23-24 


24 


hypotheses - 


cryptanalyst makes an hypothesis and then attempts 
to confirm (or disprove) it. 


in the "miniature" problem the hypothesis is made 
that code groups represent single-letter plaintext 
Letters 

"in depth" - 


by means of repetitions messages can be put 
"in depth". 


"in depth" means superimposing messages that 
have been enciphered with the same additive. 9-1 


once messages are "in depth" (in the present 
problem) what conclusion can be reached as to 
the total number of "additives" in the system? 


putting all messages "in depth" is not always 
an easy task. 


messages that begin at the same point will use 
the same additive and sometimes may be put 
into depth. 


solution of the indicator system usually will 
make the task of putting messages "in depth" 
easy and almost mechanical. 


with messages "in depth" the search for "message 
indicators" may be simplified. 
indicator(s) - 


enciphered indicators are often difficult to 
Fic. 


if a pattern is found in groups occupying certain 
positions in messages, the groups may be 
7 CRORES * 


usually the indicator system is attacked first; 
and if successful, the messages then are put 
"in depth". 


intercept times - 


the exact times that messages have been intercepted 
may be valuable 


INTRODUCTION 


message "beginnings" - 


see "beginnings" 


message index - 


definition. 


+ tig = 


nil 


18 


L6=1/ 


14 


30 


14 


message index may confirm the assumption that 
the messages in the Principal problem divide 
themselves into two distinct systems. 29 


MESSAGE INDEX (APPENDIX "B") 


90-166 

use of message index described. 4-5 
message indicator - 

after messages are (put) "in depth", can "message 
indicators" be identified? 30 
concept Of using one or more groups of enciphered 
text (encicode) as key for the encipherment of 
indicators is common 14-15 


message indicator indicates the "beginning point" 
of the "additive" used to encipher the message. 12 


message indicator may indicate not only the 

“beginning point" of the additive, but also 

perhaps the group count of the message and the 

“ending point" of the additive, 14, 30 


message indicator is usually found in the first 
or last several groups of a message. Ze wo 


search for "message indicator" (usually) begins 
with a tabulation of the first several and last 
several groups of the messages. 12 


system of enciphering indicators may be a 
completely different system, distinct from that 


used for encipherment of the placode text. 14 
there are innumerable methods for the 
encipherment of "message indicators". 14 


message print - 


definition. 4 
MESSAGE PRINT (APPENDIX "A") 62-89 
relationship of "message print" to "Message index", 4 


"Miniature problem" - 
A "MINIATURE PROBLEM" FOR THE STUDENT 1-28 


is a simple two-digit code system which has been 
(super) enciphered using the same method as that 


in the principal problem. 1 

the "miniature" problem provides a guide for 

analyzing and solving the main problem. vi 
nulls - 

null groups may be "check groups". 9 


null groups may serve as an easy, convenient 
method to place messages "in depth". 9 
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numbering system - 


the numbering system of enciphered messages and 
plaintext messages may be the same. 


one-part code - 


in a one-part code the plaintext equivalents 
are in alphabetical order while at the same 
time the placode groups are in numerical order. 


in the case of a one-part code, the problem of 
putting recovered placode groups on the same 
base as the original code groups is greatly 
facilitated. 


placode - 


definition. 


a portmanteau word coined by William F. Friedman. 


recovery of "additive" and the identification 
of placode. 


relativity of “placode”. 


where there is a "Characteristic" in the 
placode, it may often be found by examining 
enciphered groups that have been enciphered 
with the same "additive". 


PRELIMINARY REMARKS CONCERNING THE PROBLEM 


premise - 


see "hypotheses". 


principal problem - 


(THE) PROBLEM 


original purpose of problem was to train 
British cryptanalysts. 


BACKGROUND TO THE PROBLEM 

problem is in English. 

problem is not an easy one. 

problem is the piéce de résistance of the book 


scene of the problem is North Africa in 
January 1941. 


student may solve the problem if he understands 
the solution to the "miniature" problem. 


probable word method - 


probable word method may be used in code 
analysis: messages are assumed to begin with 
the word "TO". 
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L650: 


22 


21-22 


Ls=20 


Zoli Ze ¥ 


30 


Bro 2 


3361 


ate 


31-32 


29, 


Vik» 


29 
Ze 
28 


Syl 


28 


a, 


repetitions - 


Cryptanalyst may fall back upon repetitions or 


"hits" in order to put messages "in depth". 17 
locations of "hits" (within messages) may be 

Significant. 8 
one Of the principal purposes of the "message 

index" is to find repetitions between messages. 5 
repetitions are noted in messages "in depth". A 
term "hits" means "repetitions". 6-7 


with a large number of "hits" between messages, 
it is evident that the messages have been 
enciphered with the same "additive". 7 


solution of the principal problem - 


after messages are "in depth" can the "message 
indicators" be identified? 30 


after messages are "in depth" what conclusions 
can be reached as to the total number of 


additives in the system? S40) 
BACKGROUND TO THE PROBLEM 31-32 
by means of repetitions certain messages can 

be put "in depth". BLO 
clue to solution of the second system may be 

found on page 469 of Kahn's book The Codebreakers. Bul 
perseverance will lead to success! Ju, 
reconstruction of relative placode. 30 
stereotype "beginnings" and "endings" of 

messages will assist the cryptanalyst. Bal, 
traffic divides itself into two systems. 29 


solution of the principal problem will take 
certain steps. 29-31 


stereotype message "beginnings" - 


stereotype message "beginnings" will aid the 
cryptanalyst. igi, sd 


stripping additive - 
stripping additive from messages "in depth”. 18-20 


Stripping additive means recovering or es 
Solving additive from messages "in depth’. 


traffic analysis - 


extracts from the Italian Order of Battle 
Published by the Intelligence Branch of the 


General Staff. ee 


~ iis * 


identification of call-signs and personnel 
in units. 


traffic analysis provides "collateral 
information" in the form of identification 


of call-signs and names of commanders of 
enemy units. 


traffic analysis provides valuable information 
to help cryptanalysis. 


Wireless Intelligence Service provides 
identification of Italian stations. 
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